GE MULTILINK ML2400 Instruction Manual page 106

ACCESS CONSIDERATIONS
6–6
Example 6-3 shows how to allow specific MAC address on specific ports. After the MAC
address is specified, the port or specific ports or a range of ports can be queried as shown.
Example 6-4 shows how to remove a MAC address from port security
To set logging on a port, use the following command sequence:
ML2400(port-security)##
Port security Signal type set to Log and
Trap on selected port(s)
The examples provided illustrate the necessary commands to setup port security. The
recommended steps to setup security are:
Set the ML2400 software to allow port security commands (use the
port-security
Enable port security (use the
Enable learning on the required ports (for example, use the
port=11
Verify learning is enables and MAC addresses are being learnt on
required ports (use the
command).
Save the port-security configuration (use the
Disable learning on required ports (for example, use the
port=11,15 disable
Example 6-3: Allowing specific MAC addresses on specific ports
ML2400(port-security)##
Specified MAC address(es) allowed on selected port(s)
ML2400(port-security)##
PORT STATE SIGNAL
---- ----- ------
9 ENABLE LOG
11 ENABLE NONE
13 ENABLE NONE
Example 6-4: Removing MAC addresses from specific ports
ML2400(port-security)##
Specified MAC address(es) removedfrom selected
port(s)
ML2400(port-security)##
PORT STATE SIGNAL
---- ----- ------
13 ENABLE NONE
ML2400(port-security)##
MULTILINK ML2400 ETHERNET COMMUNICATIONS SWITCH – INSTRUCTION MANUAL
CHAPTER 6: ACCESS CONSIDERATIONS
signal port=11 logandtrap
command).
enable ps
enable command for port 11).
show port-security port=11
command).
allow mac=00:c1:00:7f:ec:00 port=9,11,13
show port-security port=9,11,13
ACTION LEARN COUNT
------ ----- -----
NONE ENABLE 6
NONE ENABLE 0
NONE DISABLE 0
remove mac=00:c1:00:7f:ec:00 port=13
show port-security port=13
ACTION LEARN COUNT
------ ----- -----
NONE ENABLE 0
command).
learn
command).
save
learn
MAC ADDRESS
-----------
00:e0:29:2a:f1:bd
00:01:03:e2:27:89
00:07:50:ef:31:40
00:e0:29:22:15:85
00:03:47:ca:ac:45
00:30:48:70:71:23
00:c1:00:7f:ec:00
00:c1:00:7f:ec:00
00:c1:00:7f:ec:00
MAC ADDRESS
-----------
Not Configured